Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698746 source statements · aliases may refer to the same vulnerabilityMalicious code in @nyzzpedia/baileys-new (npm)
osv ·
npm: @nyzzpedia/baileys-new
WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
cve-program ·
https://wordpress.org/plugins: profilegrid-user-profiles-groups-and-communities
XSS in ammonia via SVG `animate` and `set` animation tags
osv · CVE-2026-102342 · GHSA-m6mh-2hw2-555x
crates.io: ammonia
Malicious code in web-vitals-polyfill-core-v1 (npm)
osv · GHSA-h475-44q2-vfjx
npm: web-vitals-polyfill-core-v1
Malicious code in ragacateslikodi (npm)
osv · GHSA-mjhw-5x2v-v3wg
npm: ragacateslikodi
Malicious code in feed-widget-helper (npm)
osv · GHSA-r52r-vpcc-38v2
npm: feed-widget-helper
Malicious code in building-build (npm)
osv · GHSA-2fq4-2r26-qr64
npm: building-build
Malicious code in analytics-widget (npm)
osv · GHSA-548g-r2c9-6chm
npm: analytics-widget
Malicious code in @zaka13/thing (npm)
osv · GHSA-fxc7-fpjq-q7vf
npm: @zaka13/thing
Malicious code in @firelordzuka/pulse-poc (npm)
osv · GHSA-h645-43f8-g987
npm: @firelordzuka/pulse-poc
Malicious code in link-age-great (npm)
osv · GHSA-jmrg-vr2j-j96x
npm: link-age-great
Malicious code in test-supply-npm-lib-4 (npm)
osv ·
npm: test-supply-npm-lib-4
Malicious code in iban-validator-js (npm)
osv · GHSA-wg95-pj2w-mm76
npm: iban-validator-js
Malicious code in express-session-timer (npm)
osv ·
npm: express-session-timer
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
cve-program ·
https://wordpress.org/plugins: motors-car-dealership-classified-listings
Malicious code in epic-ue-fonts (npm)
osv · GHSA-9wgf-x9gf-f89f
npm: epic-ue-fonts
Malicious code in epic-ue-header-footer (npm)
osv ·
npm: epic-ue-header-footer
Malicious code in epic-ue-loading (npm)
osv · GHSA-6r3v-prxw-w998
npm: epic-ue-loading
Malicious code in contoso-login-sim-loader (npm)
osv ·
npm: contoso-login-sim-loader
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.